Information about CCTV surveillance at NCC workplaces

NCC conducts CCTV surveillance in order to avoid, prevent, detect and/or investigate crimes, ensure that only authorized persons are present at the workplace, and to prevent and investigate accidents in order to create a safe and secure work environment for our employees, suppliers and other persons visiting NCC.

CCTV surveillance means that NCC processes personal data in the form of footage.

NCC may also process your personal data in recorded footage in order to establish, assert and defend legal claims, e.g. prepare and investigate any claims related to insurance matters and damages.

The processing of your personal data is based on a balance of interests in accordance with Article 6 (1) (f) of the General Data Protection Regulation and is necessary to fulfill our legitimate interest in avoiding, preventing, detecting and/or investigating crimes, in order to create a safe and secure work environment for our employees, suppliers and other persons visiting NCC, as well as to establish, defend and assert legal claims.

Retention time

Recorded material is normally retained for 30 days, after which it is automatically deleted. However, if the footage is needed to establish, assert or defend legal claims in a specific case, the footage will be retained for the longer period that is necessary, e.g. until NCC has formally submitted recorded footage to the law enforcement authorities or until NCC’s internal investigation and any subsequent legal proceedings have concluded.

Access

Access to the recorded footage will only be granted to specially designated personnel and only to enable NCC to establish, assert or defend legal claims, such as for the investigation of criminal activity and at the request of a law enforcement agency.

Disclosure

Disclosure of personal data in footage will occur if it is necessary for NCC to be able to safeguard its legitimate interests in accordance with Article 6 (1) (f) of the General Data Protection Regulation by establishing, asserting or defending legal claims, and disclosure may occur to law enforcement authorities, insurance companies, other companies in the NCC Group, legal advisers and, where appropriate, parties to legal proceedings, as well as courts of law. Disclosure may also occur in order to fulfill legal obligations.

Data processors

In addition to NCC, the security and monitoring companies that help us with our CCTV surveillance will have access to the footage that is recorded by our security cameras and thereby your personal data. These companies will process the material in their capacity as personal data processors. NCC has therefore entered into a data processing agreement with these companies, which ensures that they only process your personal data in accordance with NCC’s instructions in order to fulfill their obligations to us and to protect your personal data. Your personal data is not transferred outside the EU/EEA.

Personal data controller
NCC AB, 556034–5174

Contact details:
NCC Group Head Office
Group Legal
SE-170 80 Solna, Sweden

Telephone: +46 8 585 510 00

NCC Data Protection Officer: GDPR@ncc.se

In accordance with the General Data Protection Regulation, in certain cases the person registered has the right, for example, to have their data corrected, erased or restricted. For such requests, please contact NCC at the following email address:
GDPR@ncc.se

By law, you have the right to:

Request confirmation from us about whether we are processing personal data relating to you.

Request access to and a copy of the personal data we retain about you (a ‘Register Extract’).

Request correction of personal data you consider to be incorrect, incomplete or misleading. You also have the right to have incomplete personal data completed with the relevant information.

Request erasure of your personal data in certain circumstances, unless we are under e.g. a legal requirement to retain the data.

Request that the processing of your personal data is restricted under certain circumstances; you can then, at least for a certain period of time, stop us from using your personal data other than to manage, respond to or assert legal claims or to fulfill our legal obligations.

Object to processing that is based on our or another party’s legitimate interest for reasons relating to your specific situation, and if we cannot demonstrate compelling legitimate grounds for the processing, we will stop using your personal data for the purpose in question.

Move your data (data portability) in certain circumstances by requesting a copy of the personal data concerning you in a structured format (data portability) that you can transfer to another recipient.

Questions and complaints
For specific questions about NCC’s CCTV surveillance, contact NCC at the following email address: gdpr@ncc.se

If you wish to lodge a complaint or have general questions about CCTV camera surveillance, please contact the Swedish Authority for Privacy Protection, which is the supervisory authority.
Email address: imy@imy.se
Telephone: +46 8 657 6100
Website: www.imy.se